weeek-tasks

• Analyzed: May 12, 2026, 3:19 AM
• Findings: 1
• Version: 1.0.0
• Hash: 5f5709edff79b616aeb68cfd3a4be9233ffb22d4c4a930c4c7c3aa004961d398
• Source: palm
• External report: View on VirusTotal

Findings (1)

The skill bundle is designed to interact with the WEEEK Public API for task management. The `scripts/weeek_api.py` script correctly uses `WEEEK_TOKEN` and `WEEEK_USER_ID` from environment variables for authentication and directs all network requests to the legitimate `https://api.weeek.net/public/v1` endpoint. There is no evidence of data exfiltration to unauthorized domains, malicious execution, persistence mechanisms, or prompt injection attempts in `SKILL.md`. All observed behaviors are aligned with the stated purpose of managing WEEEK tasks.